Help unbrick chinese unbranded GK7012 (XP-TE809HD)

[zbancam]

Thanks very much for this project @ant-thomas. I think my cam GK7102 (XP-TE809HD) is bricked. Unfortunately my cam is a chinese unbranded. After power on my cam, this test Pan/Tilt and after reboot itself. I can not connect to it by lan or wifi. SD card recovery not work, not detect card. Only way to connect to her is through the serial. If you can help me or everyone can help me in any way I would be grateful. Thanks very much.

This is the serial log:

 
U-Boot 2012.10 (Feb 24 2016 - 22:33:54) for GK7102 rb sc1045 v2.00 (GOKE)

HAL:  20151223
DRAM:  64 MiB
Flash: 32 MiB
32 MiB
NAND:  SPINAND MID = 0xff, DID = 0xffff, 1]: No support this SPI nand!
SF: Detected W25Q256FV with page size 256 B, sector size 64 KiB, total size 32 MiB
In:    serial
Out:   serial
Err:   serial
Net:   arm_freq(600MHz)..............0x112032
use int MII..............
gk7101
Hit any key to stop autoboot:  0
[PROCESS_SEPARATORS] run sfboot
[PROCESS_SEPARATORS] setenv bootargs console=${consoledev},${baudrate} noinitrd mem=${mem} rw ${rootfstype} init=linuxrc ;sf probe 0 0;sf read ${loadadSF: Detected W25Q256FV with page size 256 B, sector size 64 KiB, total size 32 MiB
put param to memory
mem size (41)
bsb size (2)

the kernel image is zImage or Image
entry = 0xc1000000
## Transferring control to Linux (at address c1000000)...

Starting kernel ...

machid = 3988 r2 = 0xc0000100
Uncompressing Linux... done, booting the kernel.
[    0.000000] Booting Linux on physical CPU 0
[    0.000000] Linux version 3.4.43-gk (bruce@ubuntu) (gcc version 4.6.1 (crosstool-NG 1.18.0) ) #33 PREEMPT Thu May 19 20:55:21 PDT 2016
[    0.000000] CPU: ARMv6-compatible processor [410fb767] revision 7 (ARMv7), cr=00c5387d
[    0.000000] CPU: VIPT aliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine: Goke GK7102 RB_SC1045 board V2.00
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] AHB: 0x90000000  0xf2000000  -- 0x1000000
[    0.000000] APB: 0xa0000000  0xf3000000  -- 0x1000000
[    0.000000] PPM: 0xc0000000  0xc0000000  -- 0x200000
[    0.000000] BSB: 0xc2b00000  0xf5000000  -- 0x200000
[    0.000000] DSP: 0xc2d00000  0xf6000000  -- 0x1300000
[    0.000000] hal version = 20151223
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 10414
[    0.000000] Kernel command line: console=ttySGK0,115200 noinitrd mem=41M rw rootfstype=jffs2 root=/dev/mtdblock3 init=linuxrc
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 41MB = 41MB total
[    0.000000] Memory: 36636k/36636k available, 5348k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xff600000 - 0xffe00000   (   8 MB)
[    0.000000]     vmalloc : 0x83000000 - 0xff000000   (1984 MB)
[    0.000000]     lowmem  : 0x80000000 - 0x82900000   (  41 MB)
[    0.000000]     modules : 0x7f000000 - 0x80000000   (  16 MB)
[    0.000000]       .text : 0x80008000 - 0x8044d000   (4372 kB)
[    0.000000]       .init : 0x8044d000 - 0x8046e000   ( 132 kB)
[    0.000000]       .data : 0x8046e000 - 0x80497260   ( 165 kB)
[    0.000000]        .bss : 0x80497284 - 0x804c9888   ( 202 kB)
[    0.000000] NR_IRQS:128
[    0.000000] >> gk7101 init irq vic1...
[    0.000000] >> gk7101 init irq vic2...
[    0.000000] gk7101 init vic...
[    0.000000] mach gk7101 init timer...
[    0.000000] sched_clock: 32 bits at 100 Hz, resolution 10000000ns, wraps every 4294967286ms
[    0.000000] Console: colour dummy device 80x30
[    0.000000] console [ttySGK0] enabled
[    0.010000] Calibrating delay loop... 597.60 BogoMIPS (lpj=2988032)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] CPU: Testing write buffer coherency: ok
[    0.090000] Setting up static identity map for 0xc0571630 - 0xc0571668
[    0.100000] NET: Registered protocol family 16
[    0.110000] gk7101 init timer...
[    0.110000] Init HW timer for DSP communication
[    0.120000] gk7101 init gpio...
[    0.120000] gpiochip_add: registered GPIOs 0 to 63 on device: gk7101-gpio0
[    0.130000] gpio map init...
[    0.130000] create proc dir
[    0.130000] gk7101 register devices 9
[    0.140000] gk7101 register I2C
[    0.290000] bio: create slab  at 0
[    0.290000] spi spi.0: gk7101 SPI Controller 0 created
[    0.300000] spi spi.0: master is unqueued, this is deprecated
[    0.300000] usbcore: registered new interface driver usbfs
[    0.310000] usbcore: registered  usbcore: registered new device driver usb
[    0.320000] i2c regbase: 0xf3003000
[    0.330000] i2c i2c.0: i2c irq:registers 9
[    0.330000] i2c i2c.0: GK7101 I2C[0] adapter[i2c-0] probed!
[    0.340000] i2c regbase: 0xf3004000
[    0.340000] i2c i2c.1: i2c irq:registers 58
[    0.350000] i2c i2c.1: GK7101 I2C[1] adapter[i2c-1] probed!
[    0.360000] FS-Cache: Loaded
[    0.360000] CacheFiles: Loaded
[    0.370000] cfg80211: Calling CRDA to update world regulatory domain
[    0.380000] gk7101-sd gk7101-sd.0: Slot0 req_size=0x00010000, segs=16, seg_size=0x00010000
[    0.410000] gk7101-sd gk7101-sd.0: GK7101 SD/MMC[0] has 1 slots @ 46000000Hz, [0x09e130b0:0x00000000]
[    0.420000] NET: Registered protocol family 2
[    0.420000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.430000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    0.440000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[    0.450000] TCP: Hash tables configured (established 2048 bind 2048)
[    0.460000] TCP: reno registered
[    0.460000] UDP hash table entries: 256 (order: 0, 40table entries: 256 (order: 0, 40d protocol family 1
[    0.480000] RPC: Registered named UNIX socket transport module.
[    0.490000] RPC: Registered udp transport module.
[    0.490000] RPC: Registered tcp transport module.
[    0.500000] RPC: Registered tcp NFSv4.1 backc00000] mdma init...
[    0.510000] mdma request irq: 54
[    0.520000] NFS: Registering the id_resolver key type
[    0.520000] jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[    0.530000] fuse init (API version 7.18)
[    0.540000] msgmni has been set to 71
[    0.550000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
[    0.560000] io scheduler noop registered
[    0.560000] io scheduler deadline registered
[    0.570000] io scheduler cfq registered (default)
[    0.570000] uart.0: ttySGK0 at MMIO 0xa0005000 (irq = 31) is a gk7101uart
[    0.580000] uart.1: ttySGK1 at MMIO 0xa001f000 (irq = 15) is a gk7101uart
[    0.590000] uart.2: ttySGK2 at MMIO 0xa001e000 (irq = 27) is a gk7101uart
[    0.600000] brd: module loaded
[    0.610000] loop: module loaded
[    0.620000] adc initialized (10:11)
[    0.620000] slram: not enough parameters.
[    0.630000] speed_mod is 0
[    0.630000] gk7101_flash gk7101_flash.0: W25Q256FV (32768 Kbytes)
[    0.640000] Creating 5 MTD partitions on "gk7101_flash":
[    0.640000] 0x000000000000-0x000000040000 : "uboot"
[    0.650000] 0x000000040000-0x000000050000 : "ubootenv"
[    0.660000] 0x000000050000-0x000000200000 : "kernel"
[    0.660000] 0x000000200000-0x000001000000 : "rootfs"
[    0.670000] 0x000000000000-0x000001000000 : "all"
[    0.680000] GKETH_init
[    0.680000] [GKETH_drv_probe] eth_base = 0xf200e000
[    0.690000] mii id = 0
[    0.690000] ###### PHY Reset.1.0.2
[    0.810000] mdiobus_register: PHY[0] whose id 0x00000000
[    0.810000] goke MII Bus: probed
[    0.820000] gk7101-eth gk7101-eth.0: MAC Address[02:11:22:a3:a0:00].
[    0.830000] usbcore: registered new interface driver cdc_wdm
[    0.830000] usbcore: registered new interface driver libusual
[    0.840000] musb-hdrc: version 6.0, ?dma?, otg (peripheral+host)
[    0.850000] musb phy Begin initial sequence ...
[    1.090000] gk7101 musb init end...
[    1.100000] musb-hdrc musb-hdrc: MUSB HDRC host driver
[    1.100000] musb-hdrc musb-hdrc: new USB bus registered, assigned bus number 1
[    1.110000] vm : ffde0000, phy : c25a0000
[    1.120000] dma_buf alloc ok!
[    1.120000] hub 1-0:1.0: USB hub found
[    1.120000] hub 1-0:1.0: 1 port detected
[    1.130000] musb-hdrc musb-hdrc: USB Host mode controller at f0006000 using PIO, IRQ 26
[    1[    1.140000] mousedev: PS/2 mouse device common for all mice
[    1.150000] input: GKInput as /devices/virtual/input/input0
[    1.160000] Protocol NEC[0]
[    1.160000] ir request irq: 62
[    1.160000] IR Host Controller probed!
[    1.170000] i2c /dev entries driver
[    1.170000] gk7101_wdt: GK7101 Watchdog Timer, (c) 2014 Goke Microelectronics
[    1.180000] [gk7101_wdt_init]: init
[    1.180000] [gk7101_wdt_probe]: probe
[    1.190000] [gk7101_wdt_probe]: pr00] watchdog inactive, reset disabled, irq disabled
[    1.200000] IPv4 over IPv4 tunneling driver
[    1.210000] gre: GRE over IPv4 demultiplexor driver
[    1.210000] ip_gre: GRE over IPv4 tunneling driver
[    1.220000] TCP: cubic registered
[    1.220000] Initializing XFRM netlink socket
[    1.230000] NET: Registered protocol family 10
[    1.240000] IPv6 over IPv4 tunneling driver
[    1.240000] NET: Registered pegistered protocol family 15
[    1.250000] lib80211: common routines for IEEE802.11 drivers
[    1.260000] Registering the dns_resolver key type
[    1.270000] VFP support v0.3: implementor 41 architecture 1 part 20 variant b rev 5
[    1.580000] usb 1-1: new high-speed USB device number 2 using musb-hdrc
[    9.980000] VFS: Mounted root (jffs2 filesystem) on device 31:3.
[    9.990000] Freeing init memory: 132K
Starting mdev...
[   12.610000] net eth0: ###### GKETH_start_hw
[   12.620000] net eth0: ###### GKETH_phy_start_aneg...
[   12.620000] ADDRCONF(NETDEV_UP): eth0: link is not ready
Archive:  /mnt/mtd/ipc/ipc_server
  inflating: ipc_server
[   13.620000] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready

Welcome to HiLinux
IPCamera login: Archive:  /mnt/mtd/ipc/libAPILib.so
  inflating: libAPILib.so
Archive:  /mnt/mtd/ipc/libNetLib.so
  inflating: libNetLib.so
ipc_server    libAPILib.so  libNetLib.so  sd
ipc_server    libAPILib.so  libNetLib.so  sd
The timeout was [   14.460000] watchdog: GK7101 Watchdog: watchdog did not stop!
is 15 seconds
The timeout was set to 60 seconds
[   15.900000] mt7601Usta: module license 'unspecified' taints kernel.
[   15.900000] Disabling lock debugging due to kernel taint
[   16.010000] rtusb init rtusbSTA --->
[   16.030000]
[   16.030000]
[   16.030000] === pAd = 83182000, size = 899480 ===
[   16.030000]
[   16.040000] <-- RTMPAllocTxRxRingMemory, Status=0
[   16.050000] <-- RTMPAllocAdapterBlock, Status=0
[   16.050000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x8
[   16.060000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x4
[   16.060000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x5
[   16.070000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x6
[   16.080000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x7
[   16.080000] RTMP_COM_IoctlHandle():pAd->BulkOutEpAddr=0x9
[   16.090000] NVM is EFUSE
[   16.090000] Endpoint(8) is for In-band Command
[   16.100000] Endpoint(4) is for WMM0 AC0
[   16.100000] Endpoint(5) is for WMM0 AC1
[   16.120000] Endpoint(6) is for WMM0 AC2
[   16.120000] Endpoint(7) is for WMM0 AC3
[   16.120000] Endpoint(9) is for WMM1 AC0
[   16.130000] Endpoint(84) is for Data-In
[   16.130000] Endpoint(85) is for Command Rsp
[   16.140000] usbcore: registered new interface driver rtusbSTA
[   16.170000] encript driver init successful!
[   16.200000] gpio driver init successful!
[   16.260000] i2c i2c.0: i2c[60]:gk7101_i2c_irq in wrong state[0x9]
[   17.260000] i2c i2c.0: I2C state 0x10, please check address 0x20!
[   17.260000] i2c i2c.0: i2c[60]:gk7101_i2c_irq in wrong state[0x9]
[   18.260000] i2c i2c.0: I2C state 0x10, please check address 0x20!
[   18.260000] i2c i2c.0: i2c[60]:gk7101_i2c_irq in wrong state[0x9]
[   19.260000] i2c i2c.0: I2C stFail to send data
sensor=5get sensor_type= 5
GC1024
[   19.470000] gk_vi_init
[   19.470000]  request_irq...24 ok-- video_sync
[   19.480000]  request_irq...59 ok-- video_frame_l61 ok-- video_frame
[   19.490000]  gk7101_is_valid_gpio_irq...
[   19.560000] crypto initialized (10:11)
[   19.840000] jffs2: warning: (110) jffs2_do_read_inode_internal: Truncating ino #252 to 13984 bytes failed because it only had 12288 bytes to start with!
insmod: can't insert '/mnt/mtd/ipc/modules/tv.ko': invalid module format
insert cvbs module failed!
[   19.870000] 1. LDO_CTR0(6c) = a64799, PMU_OCLEVEL c
[   19.880000] 2. LDO_CTR0(6c) = a6478d, PMU_OCLEVEL 6
[   19.900000] FW Version:0.1.00 Build:7640
[   19.910000] Build Time:201308222153____
[   19.9.910000] DLM Length = 0(bytes)
[   19.920000] Loading FW....
[   19.970000] #
[   19.980000] RTMP_TimerListAdd: add timer obj 8320c1ac!
[   19.980000] RTMP_TimerListAdd: add timer obj 8320c1c4!
[   19.990000] RTMP_TimerListAdd: add timer obj 8320c1dc!
[   20.000000] RTMP_TimerListAdd: add timer obj 8320c194!
[   20.000000] RTMP_TimerListAdd: add timer obj 8320c14c!
[   20.010000] RTMP_TimerListAdd: add timer obj 8320c164!
[   20.010000] RTMP_TimerListAdd: add timer obj 831a0fe4!
[   20.020000] RTMP_TimerListAdd: add timer obj 831841e0!
[   20.020000] RTMP_TimerListAdd: add timer obj 831841fc!
[   20.030000] RTMP_TimerListAdd: add timer obj 831a103c!
[   20.040000] RTMP_TimerListAdd: add timer obj 83186bb4!
[   20.040000] RTMP_TimerListAdd: add timer obj 83186264!
[   20.050000] RTMP_TimerListAdd: add timer obj 83186b98!
[   20.050000] RTMP_TimerListAdd: add timer obj 83186dd8!
[   20.060000] RTMP_TimerListAdd: add timer obj 83186bd0!
[   20.060000] RTMP_TimerListAdd: add timer obj 83186bec!
[   20.070000] RTMP_TimerListAdd: add timer obj 83186c08!
[   20.090000] RTMP_TimerListAdd: add timer obj 831a0fb4!
[   20.090000] RTMP_TimerListAdd: add timer obj 831a1024!
[   20.100000] RTMP_TimerListAdd: add timer obj 83186e08!
[   20.100000] RTMP_TimerListAdd: add timer obj 83186e20!
[   20.110000] RTMP_TimerListAdd: add timer obj 83186e38!
[   20.110000] RTMP_TimerListAdd: add timer obj 83186e50!
[   20.150000] cfg_mode=9
[   20.150000] wmode_band_equal(): Band Equal!
[   20.160000] Key1Str is Invalid key length(0) or Type(0)
[   20.160000] Key2Str is Invalid key length(0) or Type(0)
[   20.170000] Key3Str is Invalid key length(0) or Type(0)
[   20.170000] Key4Str is Invalid key length(0) or Type(0)
[   20.180000] 1. Phy Mode = 14
[   20.200000] 2. Phy Mode = 14
[   20.200000] NVM is Efuse and its size =1d[1e0-1fc]
[   20.230000] 3. Phy Mode = 14
[   20.230000] AntCfgInit: primary/secondary ant 0/1
[   20.420000] ---> InitFrequencyCalibration
[   20.430000] InitFrequencyCalibrationMode:Unknow mode = 3
[   20.430000] InitFrequencyCalibration: frequency offset in the EEPROM = 111(0x6f)
[   20.440000] <--- InitFrequencyCalibration
[   20.450000] RTMPSetPhyMode: channel is out of range, use first channel=1
[   20.460000] MCS Set = ff 00 00 00 00
[   20.470000] <==== rt28xx_init, Status=0
[   20.480000] 0x1300 = 00064300
[   20.480000] RTMPDrvOpen(1):Check if PDMA is idle!
[   20.490000] RTMPDrvOpen(2):Check if PDMA is idle!
[   20.720000] motor driver init successful!
[   21.040000] net eth0: ###### GKETH_phy_stop
[   21.130000] net eth0: ###### GKETH_start_hw
[   21.140000] net eth0: ###### GKETH_phy_start_aneg...
[   21.150000] ADDRCONF(NETDEV_UP): eth0: link is not ready
[   23.140000] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
rror!
umount: can't forcibly umount /mnt/mtd/ipc/tmpfs/sd: Invalid argument
killall: gerddns: no process killed
[   25.860000] iFlag: 0, iCurStep: 80
killall: upnp_map: no process killed
killall: arping: no process killed
killall: upnp_map: no process killed
killall: ddns_update: no process killed
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
workthread: log init succeed.
libs_initnettype(Lan): succeed.
videocomm(0): 6(6) 1280 720
videocomm(1): 7(7) 640 352
TimeZone: -2
workthread: init ini succeed.
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
workthread: timerreboot init succeed.
ptz type: motor
workthread: ptz init succeed.
HI_Media_SDKInit: efreq=50,resolution=31,maxresolution=6,maxwidth=1280,maxheight=720
HI_Media_SDKInit: maxchannel=2
HI_Media_SDKInit: maxresolution[0]=6
HI_Media_SDKInit: maxresolution[1]=7
timerreboot: enable=0,reboot time=00:00:00
rs tempHumidity: get data time out
rs tempHumidity: get data time out
GOKE ADI: R(5810[   35.470000] [fw_ioctl 154] 80047600
) LIBC(uClibc) ([   35.480000] [fw_ioctl 155] 80047600
gcc version 4.6.[   35.480000] [fw_ioctl 156] 80047601
1 (crosstool-NG [   35.490000] [fw_ioctl 157] 00007602
1.18.0) ) Wed Feb 3 00:21:23 PST 2016
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
[   37.430000] [fw_ioctl 154] 00007602
[   37.430000] [fw_ioctl 155] 80047600
[   37.440000] [fw_ioctl 156] 80047601
[   37.440000] [fw_ioctl 157] 00007602
[   37.440000] [fw_ioctl 170] 00007602
[   37.990000] [fw_ioctl 185] 00000000
[ERROR] get vi source info failed.
gadi_vi_open error -17015
HI_Media_SDKInit: HI_SDK_Init() error!
HI_Media_Init: init sdk failed!
HI_Websvr_Init: init media failed!
workthread: websvr start failed!
ipc_server stop: 1970-01-01 02:00:38
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/sd.sh: line 14: ps: not found
umount: can't forcibly umount /mnt/mtd/ipc/tmpfs/sd: Invalid argument
[   42.200000] iFlag: 1, iCurStep: 255
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/sd.sh: line 14: ps: not found
/tmpfs/sd: Invalid argument
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/mnt/mtd/ipc/platform.sh: line 14: ps: not found
/

Note: * I find is a XP-TE809HD model camera.

[zbancam]

I try to modify platform.sh, but without success. Does anyone know the root username and password in U-boot mode?

I tried with this, but not working:

 
admin:admin
root:root
root:null
admin:null
root:cxlinux
admin:cxlinux
default:null
admin:123456
root:123456
admin:xmhdipc
root:xmhdipc

 
$mount SD card
mount: you must be root 

$ mv mnt mnt1
mv: can't rename 'mnt': Permission denied

$init isp
init: must be run as PID 1

$ reboot
reboot: Operation not permitted

 $ ls -l mnt/mtd/ipc 
-rwxr-xr-x    1 root     root           881 Jul 13  2016 allexit.sh
-rwxr-xr-x    1 root     root          2048 Jul 13  2016 asc16
-rwxr-xr-x    1 root     root           318 Jul 13  2016 cdisk.sh
-rwxr-xr-x    1 root     root          3468 Jul 13  2016 chg_net.sh
-rwxr-xr-x    1 root     root          3204 Jul 13  2016 chknet
-rwxr-xr-x    1 root     root         12885 Jul 13  2016 chksensor
-rwxr-xr-x    1 root     root          3244 Jul 13  2016 chksock
-rwxr-xr-x    1 root     root          1168 Jul 13  2016 chkwifi.sh
-rwxr-xr-x    1 root     root           116 Jul 13  2016 clear.sh
drwxr-xr-x    4 root     root             0 May  5  2016 conf
-rwxr-xr-x    1 root     root         12824 Jul 13  2016 config_default.zip
-rwxr-xr-x    1 root     root          9712 Jul 13  2016 ddns_update
-rwxr-xr-x    1 root     root           180 Jul 13  2016 dhcp.sh
-rwxr-xr-x    1 root     root           134 Jul 13  2016 exclude.lst
-rwxr-xr-x    1 root     root           725 Jul 13  2016 facddns.sh
-rwxr-xr-x    1 root     root           216 Jul 13  2016 fdisk.sh
-rwxr-xr-x    1 root     root           401 Jul 13  2016 findap.sh
-rwxr-xr-x    1 root     root         37760 Jul 13  2016 finish.g711
-rwxr-xr-x    1 root     root         10304 Jul 13  2016 gerddns
-rwxr-xr-x    1 root     root          3036 Jul 13  2016 getdevmac
-rwxr-xr-x    1 root     root        166152 Mar  1  2016 hichip.d
-rwxr-xr-x    1 root     root        261696 Jul 13  2016 hzk16
-rwxr-xr-x    1 root     root        514527 Jul 13  2016 ipc_server
-rwxr-xr-x    1 root     root        514527 Jul 13  2016 ipc_server.bak
-rwxr-xr-x    1 root     root          5367 Jul 13  2016 libAPILib.so
-rwxr-xr-x    1 root     root          5367 Jul 13  2016 libAPILib.so.bak
-rwxr-xr-x    1 root     root         80063 Jul 1-x    1 root     root         8 
-rwxr-xr-x    1 root     root           376 Jul 13  2016 load_drv
-rwxr-xr-x    1 root     root           723 Jul 13  2016 load_media
-rwxr-xr-x    1 root     root           240 May 26  2016 loadp2p.sh
drwxr-xr-x    2 root     root             0 Jul 13  2016 modules
-rwxr-xr-x    1 root     root          2756 Jul 13  2016 net_detect
-rwxr-xr-x    1 root     root       2174412 Jul 13  2016 onvif
-rwxr-xr-x    1 root     root           576 Jul 13  2016 platform.sh
-rwxr-xr-x    1 root     root         33120 Jul 13  2016 reset.g711
-rwxr-xr-x    1 root     root          6182 Jul 13  2016 run
-rwxr-xr-x    1 root     root           421 Jul 13  2016 runarp
drwxr-xr-x    2 root     root             0 Feb 25  2016 sd
-rwxr-xr-x    1 root     root           170 Jul 13  2016 sd.sh
-rwxr-xr-x    1 root     root          5732 Jul 13  2016 sd_detect
-rwxr-xr-x    1 root     root          4064 Jul 13  2016 sd_first
-rwxr-xr-x    1 root     root           310 Jul 13  2016 sdmore
-rwxr-xr-x    1 root     root         12136 Jul 13  2016 setlinuxtime
-rwxr-xr-x    1 root     root          9944 Jul 13  2016 setnet
-rwxr-xr-x    1 root     root         69036 Jul 13  2016 smartset
-rwxr-xr-x    1 root     root            62 Jul 13  2016 smartset.sh
-rwxr-xr-x    1 root     root         43200 Jul 13  2016 start.g711
-rwxr-xr-x    1 root     root           605 Jul 13  2016 th3ddns.sh
drwxrwxrwt    4 root     root           360 Jan  1 02:00 tmpfs
-rwxr-xr-x    1 root     root          5052 Jul 13  2016 updatewifi
-rwxr-xr-x    1 root     root          6268 Jul 13  2016 upgrade
-rwxr-xr-x    1 root     root         23192 Jul 13  2016 upnp_map
-rwxr-xr-x    1 root     root           796 Jul 13  2016 upnpmap.sh
-rwxr-xr-x    1 root     root          5707 Jul 13  2016 watchdog
drwxrwxrwx   10 root     root             0 Jan  1 02:00 web
-rwxr-xr-x    1 root     root          6352 Jul 13  2016 wfsort
-rwxr-xr-x    1 root     root          1135 Jul 13  2016 wifi_ap.sh
-rwxr-xr-x    1 root     root          1845 Jul 13  2016 wifi_setsmart.sh
-rwxr-xr-x    1 root     root          2375 Jul 13  2016 wifi_setsta.sh
-rwxr-xr-x    1 root     root          3062 Jul 13  2016 wifi_wps.sh
-rwxr-xr-x    1 root     root          5616 Jul 13  2016 wifiget
-rwxr-xr-x    1 root     root          3930 Jul 13  2016 wifiset.sh 

[ohrid1]

sensegsm how you connect to the serial TXD RXD GND on PBC please ?????

[Jamyz]

@sensegsm @ohrid1 how to connect TXD RXD GND(i think is the 4 pin)